Hi,
I am developing an MVC application and would like some advise on how i could use ASP.NET Identity to implement my sequrity requirements.
In my database i have Users but i also have the concept of 'Accounts'.
A user may have access to multiple accounts and a user may have different roles/access levels in each account.
(i.e. a user could have different access in one account to another account)
I would like to use Claims and the ASP.NET identity manager to manage all the security in the application however i'm struggling to find a way of implementing this structure naturally using the ASP.NET identity System.
One idea i've come up with is to write a Custom ASP.NET Identity implementation and expose my User/Account relationships using the Claims representation.
i.e.
If there are two accounts called ACC0001, and ACC0002 and two users 'bob' and 'alice'
User 'bob' has full access to account ACC0001 but no access t ...
Go to the complete details ...